This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/duU8-DqcrbJR-jS_G7eKQiKxR-8.roa File: duU8-DqcrbJR-jS_G7eKQiKxR-8.roa (raw, json) Hash identifier: cFWSCbveByhBThDaIpOI1aib6oTyv0EzcL769gpyL08= Subject key identifier: 76:E5:3C:F8:3A:9C:AD:B2:51:FA:34:BF:1B:B7:8A:42:22:B1:47:EF Certificate issuer: /CN=4927124d9803a7de54883164a376ea72e3c63eaf Certificate serial: 019B7AC927B7A78AD52226782E534BC563D6 Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/duU8-DqcrbJR-jS_G7eKQiKxR-8.roa Signing time: Thu 01 Jan 2026 18:19:21 +0000 ROA not before: Thu 01 Jan 2026 18:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8522 IP address blocks: 139.91.0.0/16 maxlen: 16 139.91.16.0/24 maxlen: 24 139.91.247.0/24 maxlen: 24 139.91.250.0/24 maxlen: 24 139.91.251.0/24 maxlen: 24 139.91.252.0/24 maxlen: 24 139.91.253.0/24 maxlen: 24 192.67.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:27:b7:a7:8a:d5:22:26:78:2e:53:4b:c5:63:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf Validity Not Before: Jan 1 18:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76e53cf83a9cadb251fa34bf1bb78a4222b147ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f2:9c:e8:5a:58:45:8b:5f:7b:fb:43:db:e7: 06:38:9b:36:07:e9:e7:95:9b:59:6b:04:9c:b2:67: 3b:13:e5:52:e6:23:e7:c1:9d:22:d5:f1:cb:6f:72: 81:44:92:3b:03:c0:37:a8:da:b0:5a:21:07:73:fb: c8:93:d5:ab:5b:8e:3a:e8:77:a8:bd:6d:f4:06:1e: 58:56:e7:ae:3a:c9:96:fe:70:d8:65:ae:31:16:48: 56:79:61:2d:5a:16:d7:19:c6:40:dc:04:27:61:e8: e6:4f:91:bc:d7:62:6f:35:0a:e5:68:51:74:02:0e: e7:d2:dd:64:27:89:c6:ab:b1:2f:57:82:7b:7f:c4: ae:31:54:55:05:a5:b2:95:87:dc:0c:e3:41:09:7f: 8e:4b:81:81:4d:31:98:22:f3:a0:55:3d:8a:aa:91: 86:99:97:29:fa:7f:65:4a:48:19:e7:c6:d3:cd:b1: 9c:46:03:79:40:93:8e:54:59:9a:9f:e9:b3:07:ff: 51:f9:2f:3c:71:d3:b8:ce:6d:0b:0c:80:ed:6a:d5: 4a:5b:0a:ee:46:2d:a1:22:10:fd:f2:43:33:bb:2e: 6b:64:9b:ac:c0:30:7c:e9:06:00:c9:23:ad:46:b7: 85:e5:4c:b7:4d:df:ec:d1:cc:e3:1f:eb:90:a6:53: 2f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E5:3C:F8:3A:9C:AD:B2:51:FA:34:BF:1B:B7:8A:42:22:B1:47:EF X509v3 Authority Key Identifier: keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/duU8-DqcrbJR-jS_G7eKQiKxR-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.91.0.0/16 192.67.249.0/24 Signature Algorithm: sha256WithRSAEncryption ac:dc:e8:f1:b1:f9:bc:a8:fc:af:b5:62:68:ee:8c:17:79:ab: 07:54:ad:a1:89:f5:7e:5f:03:f6:34:23:3d:bb:e2:af:1b:3c: ab:64:36:55:73:83:81:53:ea:41:34:d2:b8:3a:3a:ac:97:42: 2c:bb:4b:a2:4f:6a:26:9b:c0:fb:7f:af:59:27:43:76:a5:51: 1e:cc:b3:2b:d3:0a:6c:20:90:67:46:6a:4b:34:b5:6c:a7:63: 5d:27:87:1e:a8:07:c8:3e:09:49:45:89:0f:43:a5:90:0f:b2: f7:fb:90:a7:7c:1f:27:79:ee:8e:84:f3:81:a5:10:b7:6d:aa: 3e:bf:b7:7d:4f:2d:b5:de:81:f9:06:67:00:b7:15:e9:44:8a: a3:10:25:f9:0c:fc:72:53:31:09:1d:60:99:05:66:f1:6c:d9: 68:ba:97:ae:be:88:d3:1e:0a:f8:84:ab:e0:2e:aa:2a:7e:e7: ae:52:ee:a6:73:68:4c:8d:00:a5:fd:34:96:40:ff:dd:f8:31: 40:36:95:ae:15:6c:5b:d3:ec:21:26:75:d1:59:aa:41:3b:6a: 8e:44:43:d8:ce:a6:e8:fa:da:67:f4:0d:2a:f3:e7:cf:ad:64: 25:87:6c:32:94:57:a0:63:7d:75:ad:01:f7:75:c8:96:e0:0e: 0d:61:7c:6c -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt6ySe3p4rVIiZ4LlNLxWPWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjcxMjRkOTgwM2E3ZGU1NDg4MzE2NGEzNzZlYTcyZTNj NjNlYWYwHhcNMjYwMTAxMTgxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmU1M2NmODNhOWNhZGIyNTFmYTM0YmYxYmI3OGE0MjIyYjE0N2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/Kc6FpYRYtfe/tD2+cGOJs2B+nn lZtZawScsmc7E+VS5iPnwZ0i1fHLb3KBRJI7A8A3qNqwWiEHc/vIk9WrW4466Heo vW30Bh5YVueuOsmW/nDYZa4xFkhWeWEtWhbXGcZA3AQnYejmT5G812JvNQrlaFF0 Ag7n0t1kJ4nGq7EvV4J7f8SuMVRVBaWylYfcDONBCX+OS4GBTTGYIvOgVT2KqpGG mZcp+n9lSkgZ58bTzbGcRgN5QJOOVFman+mzB/9R+S88cdO4zm0LDIDtatVKWwru Ri2hIhD98kMzuy5rZJuswDB86QYAySOtRreF5Uy3Td/s0czjH+uQplMvHwIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFHblPPg6nK2yUfo0vxu3ikIisUfvMB8GA1UdIwQY MBaAFEknEk2YA6feVIgxZKN26nLjxj6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zZTJjMzgtZjk2Zi00MGRmLWFlYWMt ZjAxNTBjODFhY2Y1LzEvZHVVOC1EcWNyYkpSLWpTX0c3ZUtRaUt4Ui04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8zZTJjMzgtZjk2Zi00MGRmLWFlYWMtZjAxNTBjODFhY2Y1 LzEvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAi1sDBADA Q/kwDQYJKoZIhvcNAQELBQADggEBAKzc6PGx+byo/K+1YmjujBd5qwdUraGJ9X5f A/Y0Iz274q8bPKtkNlVzg4FT6kE00rg6OqyXQiy7S6JPaiabwPt/r1knQ3alUR7M syvTCmwgkGdGaks0tWynY10nhx6oB8g+CUlFiQ9DpZAPsvf7kKd8Hyd57o6E84Gl ELdtqj6/t31PLbXegfkGZwC3FelEiqMQJfkM/HJTMQkdYJkFZvFs2Wi6l66+iNMe CviEq+Auqip+565S7qZzaEyNAKX9NJZA/934MUA2la4VbFvT7CEmddFZqkE7ao5E Q9jOpuj62mf0DSrz58+tZCWHbDKUV6BjfXWtAfd1yJbgDg1hfGw= -----END CERTIFICATE-----Generated at Mon Feb 2 15:43:33 2026 by rpki-client